Attack Report for Observation

Header

Time

2022/11/21, 01:41:55 (GMT)

Transaction ID

UQGGKRU7S43LRFN9

Service

smtp

Location

NL (Netherlands)

Attacker

185.239.242.37

Classification

Hfilter hostname unknown

Harm Potential

Medium

Description

Unknown client hostname (PTR or FCrDNS verification failed)

Content

220 mail.***********HELO win-g7cphcgk247.domain
250 mail.***********
MAIL FROM:<test@158-229-47-212.instances.scw.cloud>
250 2.1.0 Ok
RCPT TO:<test@gmail.com>
250 2.1.5 Ok
DATA
354 End data with <CR><LF>.<CR><LF>
250 2.0.0 Ok: queued as UQGGKRU7S43LRFN9
Quit
221 2.0.0 Bye

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate